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DETAILED ACTION 

Claims 1-17 are presented for examination. 



Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

Claims 1-5 are rejected under 35 U.S.C. 102(b) as being anticipated by Meyer et 
al., (U.S. Publication No. 2002/0145976 and Meyer I hereinafter). 

Regarding claims 1-5, Meyer I discloses a method of preventing an attack on a 
network, wherein the attack comprises injecting a spurious transmission control 
protocol (TCP) segment into a TCP connection between a sender and a receiver, 
comprising the computer-implemented steps of: 

receiving a duplicate TCP ACK message, incrementing a false duplicate ACK 
counter when a TCP re-transmission buffer maintained by the receiver is empty, when 
the false duplicate ACK counter is equal to a specified strike factor, sending a 
corrective ACK message that provides a correct sequence value and ACK value (i.e., a 
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segment is retransmitted if a threshold number of acknowledment messages identifying 
the same data segment are received by the sending peer)(Par. 0040-0060). 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 6-17 are rejected under 35 U.S.C. 103(a) as being unpatentable over 

Meyer et al., (U.S. Publication No. 2002/0145976 and Meyer I hereinafter), in view of 

Meyer et al., (U.S. Publication No. 2003/0191844 and Meyer II hereinafter) 

Teachings of Meyer I with regard to limitations of claim 1 have been discussed 
previously. 

Regarding claims 6 and 7, Meyer I discloses a method as recited in Claim 1, 
further comprising the steps of: receiving the corrective ACK message (i.e., a segment 
is retransmitted if a threshold number of acknowledment messages identifying the 
same data segment are received by the sending peer)(Par. 0040-0060). 

Meyer I does not expressly disclose determining whether the correct sequence 
value is less than another sequence value of a segment in a re-assembly buffer, 
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discarding the segment from the re-assembly buffer when the correct sequence value 
is less than the other sequence value of a segment in the re-assembly buffer. 

However, Meyer II discloses determining whether the correct sequence value is 
less than another sequence value of a segment in a re-assembly buffer, discarding the 
segment from the re-assembly buffer when the correct sequence value is less than the 
other sequence value of a segment in the re-assembly buffer (Par. 0039-0060). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time of applicant's invention to modify teachings of Meyer I with teachings of Meyer 
II because it would allow to include discarding the segment from the re-assembly buffer 
when the correct sequence value is less than the other sequence value of a segment in 
the re-assembly buffer as disclosed by Meyer II. This modification would have been 
obvious because one of ordinary skill in the art would have been motivated by the 
suggestion of Meyer II to avoid unnecessary retransmissions and reduce the burstiness 
of the transmissions (Meyer II, Par. 0011). 

Regarding claims 8 and 13-17, Meyer I discloses a method of preventing an 
attack on a network, wherein the attack comprises injecting a spurious transmission 
control protocol (TCP) segment into a TCP connection between a sender and a 
receiver, comprising the computer-implemented steps of: 

receiving a particular TCP segment (Par. 0040-0060). 

Meyer I does not expressly disclose determining whether the correct sequence 
value is less than another sequence value of a segment in a re-assembly buffer, 
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discarding the segment from the re-assembly buffer when the correct sequence value 
is less than the other sequence value of a segment in the re-assembly buffer. 

However, Meyer II discloses determining a sequence value gap as between the 
particular TCP segment and a prior TCP segment previously placed in a re-assembly 
buffer maintained by the receiver, determining whether the sequence value gap is too 
large according to a specified heuristic, if the sequence value gap is too large, then 
performing the steps of: creating and sending a dummy segment carrying a particular 
sequence value that is just prior to a last properly acknowledged sequence value, 
receiving an acknowledgment of the dummy segment, determining whether a second 
sequence value carried in the acknowledgment is less than a third sequence value of 
the first TCP segment, and discarding the particular TCP sement from the re-mssembly 
buffer when the second sequence value carried in the acknowledgment is less than the 
third sequence value of the particular TCP segment (Par. 0039-0060). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time of applicant's invention to modify teachings of Meyer I with teachings of Meyer 
II because it would allow to include discarding the segment from the re-assembly buffer 
when the correct sequence value is less than the other sequence value of a segment in 
the re-assembly buffer as disclosed by Meyer II. This modification would have been 
obvious because one of ordinary skill in the art would have been motivated by the 
suggestion of Meyer II to avoid unnecessary retransmissions and reduce the burstiness 
of the transmissions (Meyer II, Par. 0011). 
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Regarding claim 9, Meyer I discloses wherein the specified heuristic holds when 
a re-assembly gap value is greater than one-half of a then-current window size (Par. 
0067). 

Regarding claims 10-12, Meyer I discloses wherein the specised heuristic holds 
when a re-assembly gap value is greater than the lesser of (a) one-half of a then- 
current window size or (b) a multiple of a maximum allowed sepnent size (Par. 0067). 



Conclusion 

The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

Ameigeiras et al., (U.S. Publication No. 2004/0052234), and 
Zuk et al, (U.S. Publication No. 2003/0154399). 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Arezoo Sherkat whose telephone number is (571) 272- 
3796. The examiner can normally be reached on 8:00-4:30 Monday-Friday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (571) 272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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Patent Examiner 
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